By using performance logs you can record performance information for replay in Performance Monitor at a later date. You can also export logging data to spreadsheets or databases for analysis and report generation. Performance logging is configured as a Windows service called Performance Logs and Alerts. Because this service runs under the special identity Network Service by default, a user needn't be logged on to the computer you are monitoring to collect performance information.
The Performance Logs and Alerts service is configured to start manually and is stopped by default. You shouldn't start it yourself. It is started by the Performance Logs and Alerts snap-in as necessary.
Creating Performance Logs
You create performance ...